Manifest

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
File:                     F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft (raw, json)
Hash identifier:          5K6kt21Ld2fNqHXL+ZgSwzqLBcu4ySYz9survbZX304=
Subject key identifier:   9D:6D:4F:DD:C8:27:85:E8:A5:32:F6:E6:50:AD:50:04:03:E6:FD:AF
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       2CBF4D5907D26DD35ADB4DA7F5655ED307B49787
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
Manifest number:          04D1
Signing time:             Thu 17 Apr 2025 04:31:05 +0000
Manifest this update:     Thu 17 Apr 2025 04:26:05 +0000
Manifest next update:     Sun 20 Apr 2025 16:13:05 +0000
Files and hashes:         1: 3130332e3133352e37322e302f32332d3234203d3e203436303236.roa (hash: rEgIPgrk+DS47tvTK2+eEPfHUVseXsnwTUUBVtEyooc=)
                          2: 3130332e3133352e37332e302f32342d3234203d3e203436303236.roa (hash: 2/x4Qw/F/zsfsvc9JOJlY2G2LhkflQn7lD5v28Bqntk=)
                          3: 3137352e3131312e3131372e302f32342d3234203d3e203436303236.roa (hash: qPhFyLO5p2XLEIOO0toGgTiGmQ5k4sJq0J9ZvFILUNg=)
                          4: 3137352e3131312e3131382e302f32342d3234203d3e203436303236.roa (hash: H5UbeEY/iKVWeyVEanGtaf2L0y0JUm9EF64WOl/HBQQ=)
                          5: 3130332e3133352e37322e302f32322d3234203d3e203436303236.roa (hash: yzByHbO6Frok5mfNqGJAnbHUvCHTDaMTJ6hmg53mLQI=)
                          6: 3137352e3131312e3131392e302f32342d3234203d3e203436303236.roa (hash: Sy6BflqYLR0sZsbRWtHtSQOlWDRu7he2nETil7/zL5w=)
                          7: 3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (hash: m0CFS0bXXlC2sSkkYuX1uK7YpHcSKbwTasnOg//5UpE=)
                          8: 3137352e3131312e3131322e302f32342d3234203d3e203436303236.roa (hash: 7qHsw3w27NVdqWTWhdv7nrW74KPBDCmwGCBiiRBioWQ=)
                          9: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl (hash: M45lG+zEZqtu3DgN94MY6rAipzl6W+o/9jkdzUyblj8=)
                          10: 3130332e3133352e37352e302f32342d3234203d3e203436303236.roa (hash: hm/9X3cuyk8jd/AB2iBbcuodpHF2xW4uztYBSuY3yNU=)
                          11: 3130332e3133352e37342e302f32342d3234203d3e203436303236.roa (hash: iv0At4Oeueo57x1vdPZ8SVWvO7rIBV/xKbQmx2X640g=)
                          12: 3137352e3131312e3131322e302f32312d3234203d3e203436303236.roa (hash: ThbbDvKhsxoAnPUKtdbY/FsPIfXpLzxzoe4gZ4SwG7I=)
                          13: 3137352e3131312e3131362e302f32342d3234203d3e203436303236.roa (hash: CTD8Xvgjr9YDqDwDOqgLumiXOGwu1HyyyOVZc6JRmTw=)
                          14: 3130332e3133352e37342e302f32332d3234203d3e203436303236.roa (hash: KXtJmDO4hKKtckmp6/OjWqYrbZ7ZmK12D4CTr8FodJE=)
                          15: 3130332e3133352e37322e302f32342d3234203d3e203436303236.roa (hash: mkruWkyUTX+c2Tw+0w7WwT3w2s3+OGAbVUZStH/a/n8=)
                          16: 3137352e3131312e3131342e302f32342d3234203d3e203436303236.roa (hash: 3p/hk5MLyUzRcTjxx6VZclvMzV7vaFx0cjt9/zXwI+E=)
                          17: 3137352e3131312e3131332e302f32342d3234203d3e203436303236.roa (hash: qw0lOUkhaAxZB0W6Uovf+8Fl+4ITR1IdmbPGHHrVmrg=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Apr 2025 16:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bf:4d:59:07:d2:6d:d3:5a:db:4d:a7:f5:65:5e:d3:07:b4:97:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Apr 17 04:26:05 2025 GMT
            Not After : Apr 20 16:13:05 2025 GMT
        Subject: CN=9D6D4FDDC82785E8A532F6E650AD500403E6FDAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:57:b5:cd:b9:df:e4:29:b4:3f:60:d4:62:
                    a6:5a:32:e7:e1:86:28:41:d8:16:dd:44:0f:a9:a6:
                    7a:a6:f6:0b:2c:ff:de:ec:f2:52:b9:d8:e8:49:11:
                    b1:75:2a:26:4f:1c:02:0e:27:35:74:ed:67:b1:b7:
                    05:3c:10:39:15:f0:93:9c:57:ec:10:31:76:50:fd:
                    fe:df:81:50:4d:5f:7b:f9:28:83:a1:44:2c:c3:65:
                    96:e1:c2:7d:85:35:2e:e0:67:fb:81:b2:67:e7:cb:
                    6c:37:57:74:d2:82:b8:a9:d1:88:e5:a1:dd:0d:6d:
                    39:d8:6b:bc:c8:b5:79:78:bf:21:cc:da:36:90:1d:
                    18:65:3b:74:49:58:c3:07:59:c8:e5:18:36:f9:10:
                    4f:51:bc:07:2e:40:d2:3d:dc:6b:41:35:13:46:8a:
                    db:b2:d8:8a:d3:3b:f6:57:f5:05:ca:6e:50:00:df:
                    27:f3:e8:58:87:84:1d:55:97:43:09:f5:9a:ed:5c:
                    9d:63:ca:85:00:be:43:63:d0:fc:f3:21:e2:5f:bb:
                    43:08:f4:3b:67:e1:96:80:64:5b:5f:93:94:dc:c7:
                    cf:23:1c:9e:59:a2:7d:29:a6:55:d9:e6:bb:91:c8:
                    f3:f6:c6:98:b6:2b:52:ce:e8:43:aa:34:3d:ae:ea:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6D:4F:DD:C8:27:85:E8:A5:32:F6:E6:50:AD:50:04:03:E6:FD:AF
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:db:8a:84:f2:d8:21:1f:8f:c9:34:9e:97:3a:01:75:6e:61:
         e6:33:50:ba:20:80:25:02:e3:92:24:cc:dc:62:7c:b8:6a:8f:
         3d:40:9c:f7:b7:5e:2a:82:0a:12:a7:af:b0:7a:07:54:04:cc:
         9f:96:e8:02:8f:0a:2d:c4:76:e2:13:8d:a2:06:bd:06:dc:7b:
         4e:91:8f:90:55:39:e0:ed:63:50:cc:e5:7a:4f:98:6d:3e:46:
         f3:3a:28:02:d6:aa:89:92:8d:1c:57:94:3d:9f:fd:a9:13:f9:
         b0:f3:2d:3e:b2:bb:ff:2e:50:bf:e4:b0:14:c7:4e:74:12:0b:
         bb:22:aa:8f:09:bd:92:d8:59:df:94:75:69:78:65:4e:d2:46:
         b3:f8:5f:88:5c:2c:f1:f0:4c:eb:00:d1:76:83:15:68:a8:bb:
         44:03:d2:fd:23:db:b4:6e:28:14:cc:e0:63:f5:a3:d6:88:9d:
         21:1a:5e:46:f9:6a:f6:d7:94:40:31:22:78:61:b5:91:3c:a0:
         6c:38:27:18:6b:38:91:e2:cf:f2:5c:ce:16:62:09:12:75:54:
         e3:a8:64:a2:a0:80:d3:13:56:79:65:b8:d7:19:1a:20:bf:98:
         12:46:40:84:13:1e:67:3d:33:b1:06:f7:53:8b:f5:e5:68:c7:
         aa:cd:5c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:25:01 2025 by rpki-client